Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/18a5c2-25f4-45fc-bb41-9afdc345e3d3/1/PA_tbg0UKi8JwEDJmvHJNWAgkpE.mft
File: PA_tbg0UKi8JwEDJmvHJNWAgkpE.mft (raw, json)
Hash identifier: KNnYQdtUHFk/CaUDS/1DxTnbfdhJU4IKcfsekBF6R3U=
Subject key identifier: E7:2D:5C:8A:C8:32:C1:91:F0:E2:7D:D8:B0:08:6E:21:84:B0:C4:C1
Authority key identifier: 3C:0F:ED:6E:0D:14:2A:2F:09:C0:40:C9:9A:F1:C9:35:60:20:92:91
Certificate issuer: /CN=3c0fed6e0d142a2f09c040c99af1c93560209291
Certificate serial: 0194BC73023914C49597A3B77B92EB29FC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PA_tbg0UKi8JwEDJmvHJNWAgkpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/18a5c2-25f4-45fc-bb41-9afdc345e3d3/1/PA_tbg0UKi8JwEDJmvHJNWAgkpE.mft
Manifest number: 0EAD
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: PA_tbg0UKi8JwEDJmvHJNWAgkpE.crl (hash: B/zdl5OxOhFvAawo6FT+jqiqcZtVyxlvVHGqLicByxQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:02:39:14:c4:95:97:a3:b7:7b:92:eb:29:fc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c0fed6e0d142a2f09c040c99af1c93560209291
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=e72d5c8ac832c191f0e27dd8b0086e2184b0c4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:75:01:0d:c4:90:0b:5e:76:e3:90:e2:8c:
18:09:f2:a7:d9:d0:74:d5:bb:8b:6c:f9:0c:6c:fc:
f7:f7:1a:47:c9:96:b4:03:38:31:7a:77:3b:a3:7f:
6a:86:bd:24:d4:ba:77:26:0e:96:1c:74:f9:c9:9f:
81:00:d3:fb:60:7d:1a:bb:c4:a4:9c:3b:fb:65:4f:
d6:7e:d6:5c:82:3c:87:55:14:13:b7:0b:05:b7:68:
99:3f:98:7d:b5:e3:71:1a:b3:69:5f:2c:90:90:c7:
99:e0:d9:08:aa:04:79:3b:7b:8b:8c:33:5b:e9:6a:
34:5c:f3:3f:dc:08:42:d8:16:51:43:d5:5b:38:b5:
57:c0:3e:bc:79:b9:d5:60:75:e7:90:17:64:73:70:
d0:14:66:68:b9:44:15:1a:bb:d6:16:d3:76:5f:b7:
77:70:2d:d4:cc:d2:61:78:df:85:63:0e:c0:b8:78:
b3:03:b3:2d:ef:1a:0d:35:ec:38:d4:43:58:05:94:
5a:48:36:84:09:92:4b:d5:d5:a5:ec:98:23:aa:23:
18:aa:b4:16:9f:63:b0:a0:15:b8:f5:34:ee:65:d4:
aa:5c:ca:73:0d:5b:17:97:97:fa:ef:cc:5d:c0:e4:
22:9c:a9:eb:af:47:43:ec:fd:52:ff:1b:80:9e:f8:
2c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2D:5C:8A:C8:32:C1:91:F0:E2:7D:D8:B0:08:6E:21:84:B0:C4:C1
X509v3 Authority Key Identifier:
keyid:3C:0F:ED:6E:0D:14:2A:2F:09:C0:40:C9:9A:F1:C9:35:60:20:92:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PA_tbg0UKi8JwEDJmvHJNWAgkpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/18a5c2-25f4-45fc-bb41-9afdc345e3d3/1/PA_tbg0UKi8JwEDJmvHJNWAgkpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/18a5c2-25f4-45fc-bb41-9afdc345e3d3/1/PA_tbg0UKi8JwEDJmvHJNWAgkpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:43:2d:b7:25:ed:c6:d0:0a:60:89:05:a2:de:5b:6a:30:a1:
3c:13:ea:61:18:66:e8:8c:88:83:16:11:81:41:f9:e1:e2:b5:
fb:14:ac:24:87:e0:f4:b0:5c:cc:66:1f:7b:a8:4f:f9:bf:46:
f9:f7:34:57:b2:51:ed:e1:1f:a7:73:52:98:41:c0:a2:b8:71:
8f:7a:29:62:8c:a7:be:88:fe:5a:47:69:4b:31:60:56:e6:cd:
78:ab:a4:9a:ce:b4:f5:f4:f7:39:df:81:23:00:b2:1f:62:b1:
bf:1e:e0:47:67:97:d6:65:a5:3b:e8:f9:96:48:10:3c:6a:1d:
69:dd:68:9c:34:b2:6e:f4:7a:89:99:f7:2b:a5:80:98:4e:79:
5a:49:c4:20:43:77:b4:48:db:67:2d:70:5c:7e:2d:5d:db:18:
0d:20:03:94:29:62:43:07:71:4a:fc:9b:6e:68:6b:e4:da:67:
3e:02:0c:9a:dc:95:de:a6:48:9b:9e:5b:72:d7:3e:cd:86:ca:
41:3f:4c:28:86:9b:61:63:09:56:75:38:57:95:3f:07:93:d6:
eb:4a:2a:e8:41:a0:e7:5b:58:8c:f1:93:1b:d6:4c:a2:cd:29:
53:0c:8a:2b:d6:84:6b:82:79:f6:33:45:08:d8:c2:f0:ce:9b:
0a:75:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:37 2025 by rpki-client